定期的なセキュリティ監査中に、管理者はクラウドストレージのバックアップが不正アクセスされ、変更されていることを発見しました。今後、このようなインシデントを最も直接的に軽減するには、どのような対策が有効でしょうか?
正解:D
According to CEH v13 Cloud Computing, backup integrity and resilience are critical components of cloud security. The 3-2-1 backup model is a widely recommended best practice to mitigate unauthorized access, data corruption, and ransomware-related incidents.
The 3-2-1 rule dictates that organizations should maintain:
3 copies of critical data
Stored on 2 different media types
With 1 copy stored offsite or offline
This approach ensures that even if one backup is compromised, altered, or deleted-as described in the scenario-clean and trusted versions of the data remain available for restoration. CEH v13 emphasizes that offline or immutable backups significantly reduce the impact of malicious modification.
Option A focuses on physical security, which does not protect cloud backups. Option B addresses availability, not integrity. Option C is relevant to web application security, not backup protection.
CEH v13 explicitly highlights backup segregation and redundancy as key countermeasures against cloud data compromise. Therefore, Option D is the most direct and effective mitigation strategy.